cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Passthrough or VPN Concentrator

Highlighted
Here to help

Passthrough or VPN Concentrator

Hi,

 

When we select the MX to be in Passthrough or VPN Concentrator mode how does the MX know which mode to operate on? What features do we gain or loan in Passthrough or VPN Concentrator mode?

4 REPLIES 4
Highlighted
Building a reputation

Re: Passthrough or VPN Concentrator

@Aamir  

Choose this option if you simply want to deploy the MX device:

  • In bridge mode for traffic shaping and additional network visibility.
  • As a one-armed VPN concentrator.
  • it is also one of the best recommendation for SD WAN deployment

 

Networks and Routing > MX Addressing and VLANs

 

Highlighted
Here to help

Re: Passthrough or VPN Concentrator

HI,

 

In bridge mode do I still get firewall functionality? My understanding is bridge mode is firewall operating in layer 2 mode which means no routing, with one-armed concentrator deployment its still a layer 3 device, so by Passthrough or VPN Concentrator how does the MX know it needs to work on bridge mode with no routing and or VPN concentrator mode?

Highlighted
Building a reputation

Re: Passthrough or VPN Concentrator

@Aamir  Passthrough/Concentrator Mode is best used when there is an existing Layer 3 device upstream handling network routing functions.  The MX in this instance would still act as a security appliance, but with less functionality for Layer 3 networking.

Highlighted
Building a reputation

Re: Passthrough or VPN Concentrator

The recommended use case for the MX security appliance in passthrough mode is when it is acting as a VPN Concentrator for the Cisco Meraki Auto VPN feature.  Passthrough/VPN Concentrator mode ensures easy integration into an existing network that may already have layer 3 functionality and edge security in place.  With this mode, a Cisco Meraki MX security appliance can be integrated into the existing topology and allow for seamless site to site communication with minimal configuration needed.

Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.